JaffaCakes118_4367f8d36e414900239632e34e1aaecb

General

Target
JaffaCakes118_4367f8d36e414900239632e34e1aaecb
Size 96KB
Sample250127-y813navmgk
SHA256 cf241e8281859c3f97e7590a2e88f0357cadd89e9c336c912a6c02eb48c2f6cd
MD5 4367f8d36e414900239632e34e1aaecb
SHA1 3b981f791f60de927c12b4e810d0c0d2f50897d1
SHA512 5e1a7bce9deae805aef4ad2373c73e67899d6a1be49d3bc1f438148437010da15448b8f2718bc9c7846b9d4c618d3d5c3103915f77fb5c095987f2b420c0995d
SSDEEP 768:E0YIOBiNOSUD6b45KlX0rCTxM2nb11vUZu61W+zoxzrtW619nyINmlWk3Mp:E1IOUw/CTm2b11cZB1WJXnOlWk3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_4367f8d36e414900239632e34e1aaecb

File Explorer

JaffaCakes118_4367f8d36e414900239632e34e1aaecb

.dll 96KB

JaffaCakes118_4367f8d36e414900239632e34e1aaecb

IMPHASH 6ae3dfb1b3fbdefeba6c62ab08ed2e2b
SHA256 cf241e8281859c3f97e7590a2e88f0357cadd89e9c336c912a6c02eb48c2f6cd
MD5 4367f8d36e414900239632e34e1aaecb
SHA1 3b981f791f60de927c12b4e810d0c0d2f50897d1
SHA512 5e1a7bce9deae805aef4ad2373c73e67899d6a1be49d3bc1f438148437010da15448b8f2718bc9c7846b9d4c618d3d5c3103915f77fb5c095987f2b420c0995d
SSDEEP 768:E0YIOBiNOSUD6b45KlX0rCTxM2nb11vUZu61W+zoxzrtW619nyINmlWk3Mp:E1IOUw/CTm2b11cZB1WJXnOlWk3
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16708

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

DisableThreadLibraryCalls GetLastError GetTickCount WinExec TerminateProcess LoadLibraryA CreateProcessA GetSystemDirectoryA CompareStringW CompareStringA FlushFileBuffers GetProcAddress GetVersionExA CreateFileA DeviceIoControl Sleep CloseHandle GetStringTypeW GetStringTypeA SetStdHandle GetOEMCP GetACP IsBadCodePtr InterlockedDecrement InterlockedIncrement RtlUnwind GetTimeZoneInformation GetSystemTime GetLocalTime GetCommandLineA GetVersion HeapFree HeapAlloc WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection ExitProcess GetCurrentThreadId TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue GetCurrentProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW GetModuleHandleA GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree WriteFile SetFilePointer VirtualAlloc HeapReAlloc IsBadWritePtr GetCPInfo SetUnhandledExceptionFilter IsBadReadPtr SetEnvironmentVariableA

urlmon

URLDownloadToFileA

atl

ord18 ord15 ord16 ord21 ord57

netapi32

Netbios

wininet

InternetOpenA InternetReadFile InternetGetLastResponseInfoA InternetCloseHandle InternetOpenUrlA

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_4367f8d36e414900239632e34e1aaecb

kernel32

urlmon

atl

netapi32

wininet

generic